When one subscribed protocol detects an exploit, every other one enters defense mode inside the same 200ms Flashblock. Engine-signed low-level call, on-chain, no off-chain relayer in the trust path.